[zen_1]

GrapheneOS supports installing Play services as a sandboxed unprivileged app [1] where you can revoke its network permissions and manually restore them if needed. I should know, it's what I do :).

If I could avoid using google software completely, I would, but this is the second best option IMO.

[1] https://grapheneos.org/faq#google-services

[propogandist]

is microG still a viable alternative to GApps or is there something else that’s taken its place?

The ROM community, especially those that cared about privacy, was quite small few years ago, especially for non-Pixel devices

[zen_1]

> is microG still a viable alternative to GApps or is there something else that’s taken its place?

microG is still viable afaik, but I prefer GrapheneOS's sandboxed google play approach since it's much more feature complete, and supports e.g. my 2fa hardware key, while that's currently missing from microG.

> The ROM community, especially those that cared about privacy, was quite small few years ago, especially for non-Pixel devices

Yeah Pixel devices are still the only ones you can expect to be supported by GrapheneOS and CalyxOS etc..., for anything else I think your best bet is to install LineageOS(formerly cyanogenmod) and microG if you can accept the current https://github.com/microg/GmsCore/wiki/Implementation-Status